 William Vu
|
8cae04f194
|
Use constant for maximum shellcode size
|
2019-09-30 14:18:41 -05:00 |
|
|
William Vu
|
fb1bb0fd2f
|
Don't use NOPs because Peter would be sad
|
2019-09-30 14:18:41 -05:00 |
|
|
William Vu
|
530bf9bc0c
|
Finish RCE with Jacob's help
|
2019-09-30 14:18:41 -05:00 |
|
|
William Vu
|
3a5a05f3a9
|
Use recently enhanced Rex::Text.xor
|
2019-09-30 14:18:41 -05:00 |
|
|
William Vu
|
90cb0e039f
|
Add DOUBLEPULSAR payload execution
|
2019-09-30 14:18:41 -05:00 |
|
|
dwelch-r7
|
30691d1c18
|
Add ranking
|
2019-09-30 12:20:38 +01:00 |
|
|
h00die
|
c188d179ed
|
fix atutor bugs
|
2019-09-26 20:37:10 -04:00 |
|
|
dwelch-r7
|
7395297da4
|
Add rank
|
2019-09-26 13:32:36 +01:00 |
|
|
dwelch-r7
|
1425d180b9
|
Add module to exploit file sharing wizard
|
2019-09-26 13:30:52 +01:00 |
|
|
RAMELLA Sébastien
|
28bbcd5402
|
fix. linux stager and add. documentation
|
2019-09-26 16:26:44 +04:00 |
|
|
RAMELLA Sébastien
|
dfd97a7518
|
add. stager and fix. generic command
|
2019-09-26 12:40:03 +04:00 |
|
|
Wei Chen
|
6a80bf2cf5
|
Should ensure, not in exception
|
2019-09-25 22:23:41 -05:00 |
|
|
h00die
|
d6a7da9490
|
fix atutor nil
|
2019-09-25 22:02:55 -04:00 |
|
|
h00die
|
ca99bd4191
|
fix nil check
|
2019-09-25 21:24:14 -04:00 |
|
|
Wei Chen
|
8dc238e687
|
Add TotaJS CMS Code Injection in Widget Creation
|
2019-09-25 16:54:44 -05:00 |
|
|
RAMELLA Sébastien
|
82457a4049
|
add. exploit module vbulletin 5.x unauth RCE
|
2019-09-26 01:11:22 +04:00 |
|
|
Shelby Pace
|
4710322cd7
|
Land #11762, add sosreport privesc
|
2019-09-24 09:48:57 -05:00 |
|
|
Brent Cook
|
b668e1fa5b
|
Land #12283, Add exploit module for CVE-2019-0708 / BlueKeep
|
2019-09-23 11:22:36 -05:00 |
|
|
Brent Cook
|
c0be631bf0
|
tweak groombase for vmware 15.1
|
2019-09-23 11:01:04 -05:00 |
|
|
dzflack
|
7ea19c7d26
|
fix msftidy error
|
2019-09-20 20:27:30 +08:00 |
|
|
dzflack
|
e1ab657e55
|
add warning to the beginning of documentation
|
2019-09-20 19:41:55 +08:00 |
|
|
Brent Cook
|
acb351ac44
|
add a few more vmware targets (emphasising the fragility here)
|
2019-09-19 07:02:02 -05:00 |
|
|
Brent Cook
|
67ee46ec03
|
add additional target, set default target GROOMSIZE to 100M (thanks aconite33)
|
2019-09-19 06:05:08 -05:00 |
|
|
Brent Cook
|
8138e2f185
|
remove email
|
2019-09-19 06:05:08 -05:00 |
|
|
Brent Cook
|
458dc59594
|
move kernel shellcode comments to the correct place
|
2019-09-19 06:05:08 -05:00 |
|
|
Brent Cook
|
d80ad89160
|
resolve msftidy error
|
2019-09-19 06:05:08 -05:00 |
|
|
Brent Cook
|
7e4a99689a
|
remove separate PoC and shellcode files, replaced with new integrated module
|
2019-09-19 06:05:08 -05:00 |
|
|
Brent Cook
|
51c0c24c20
|
add and update documentation from original PoC
|
2019-09-19 06:05:08 -05:00 |
|
|
Brent Cook
|
fb729b5f11
|
add bare metal target
|
2019-09-19 06:05:08 -05:00 |
|
|
Brent Cook
|
02ba21a0a0
|
remove WinVer
|
2019-09-19 06:05:08 -05:00 |
|
|
Brent Cook
|
4677e0f389
|
include internal OS version in target names
|
2019-09-19 06:05:08 -05:00 |
|
|
William Vu
|
cdd3378acc
|
Clean up BlueKeep exploit
|
2019-09-19 06:05:08 -05:00 |
|
|
Brent Cook
|
e32409b379
|
merge Win 7/2008 targets
|
2019-09-19 06:05:08 -05:00 |
|
|
Brent Cook
|
f2c475454a
|
tag targets for Virtualbox, add Windows 2008R2
|
2019-09-19 06:05:08 -05:00 |
|
|
Brent Cook
|
15ce66cb02
|
adjust to ManualRanking
|
2019-09-19 06:05:08 -05:00 |
|
|
Brent Cook
|
35e3704526
|
add current caveats and notes from zerosum0x0
|
2019-09-19 06:05:08 -05:00 |
|
|
Brent Cook
|
e243e1a50d
|
add a more likely arch with the default fingerprint target
|
2019-09-19 06:05:08 -05:00 |
|
|
Brent Cook
|
f3a9af2ea8
|
rename for consistency with scanner module
|
2019-09-19 06:05:08 -05:00 |
|
|
Brent Cook
|
855281b0ac
|
add auto-target by default, only scan and show a user message for now
|
2019-09-19 06:05:08 -05:00 |
|
|
Brent Cook
|
b860cafddf
|
remove 'COMPACT' mode since it's not needed here
|
2019-09-19 06:05:08 -05:00 |
|
|
Brent Cook
|
49cb6204e5
|
explicit short jump no longer needed with relative address fixes
|
2019-09-19 06:05:08 -05:00 |
|
|
Brent Cook
|
559901865e
|
add PR ref
|
2019-09-19 06:05:08 -05:00 |
|
|
Brent Cook
|
9e321dc30e
|
move hack into fixup code
|
2019-09-19 06:05:08 -05:00 |
|
|
Brent Cook
|
9150ab4e1a
|
add pre/post processor phase to address metasm limits
This adds a pre/post processor phase that allows specifying relative
label offsets when loading effective addresses from metasm-generated
code.
|
2019-09-19 06:05:08 -05:00 |
|
|
Brent Cook
|
6522866071
|
specify short jump opcodes explicitly
|
2019-09-19 06:05:08 -05:00 |
|
|
OJ
|
f479ed2d73
|
Small refactors, comments and tidying up
|
2019-09-19 06:05:08 -05:00 |
|
|
William Vu
|
725bff5e2d
|
Add CheckScanner and ForceExploit
|
2019-09-19 06:05:08 -05:00 |
|
|
Brent Cook
|
49762084f2
|
minor cleanup of debug code and remove some fixed encodings (still need a couple)
|
2019-09-19 06:05:08 -05:00 |
|
|
Brent Cook
|
a529866e1a
|
first working metasm shellcode
|
2019-09-19 06:05:08 -05:00 |
|
|
Brent Cook
|
6225c5c31f
|
skip payload encoding, be a bit more self-documenting
|
2019-09-19 06:05:08 -05:00 |
|